Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65bb0bfb-03df-3e0d-81ca-25390f6635ff.roa
File:                     65bb0bfb-03df-3e0d-81ca-25390f6635ff.roa (raw, json)
Hash identifier:          8qxexgX6jXbh7VvonnJgFUs4KnEzoLlc7KoxIIQycuc=
Subject key identifier:   76:D7:A4:74:76:8E:1A:2D:D5:8B:09:4A:B5:CD:50:34:1F:19:99:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D71A8B2EED124EB449D310
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65bb0bfb-03df-3e0d-81ca-25390f6635ff.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     10515
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:1a:8b:2e:ed:12:4e:b4:49:d3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=df1fc857-ced9-40f8-a267-072cbe84f24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:db:68:86:c7:8b:23:1a:f0:56:79:c3:f2:a0:
                    49:42:9d:58:f2:d3:1b:68:05:2b:12:fd:ce:c3:24:
                    e1:09:d5:44:ea:5a:fc:e5:28:26:27:c2:1f:68:6f:
                    7b:89:b4:8a:5f:3b:b0:5a:1a:1d:17:d2:53:4e:71:
                    96:aa:ed:fc:b8:f3:a2:d6:2a:6a:80:95:92:0d:b8:
                    dc:d8:d1:e5:b7:8e:b7:b6:1b:35:4f:ce:97:2b:2d:
                    2c:05:0e:90:ce:d4:f4:8c:5e:c5:e7:a8:50:bb:f4:
                    7f:ab:59:e8:06:5a:d2:99:23:f4:fc:6e:2d:04:c6:
                    c8:99:f7:f4:3f:d9:c5:91:99:68:5d:07:a9:8e:f5:
                    ab:24:23:fc:9c:4e:b4:6c:f0:66:13:d7:a0:46:a1:
                    7e:c3:56:de:45:91:55:fb:1f:4d:9f:c2:d6:a7:69:
                    2c:1c:63:35:99:a0:81:e4:92:ba:77:35:45:2a:c5:
                    3b:a0:28:b1:61:ce:4e:87:65:e7:14:e7:70:d3:7d:
                    a7:2c:b2:30:95:23:cc:c8:5c:f7:16:e4:88:c3:d8:
                    ca:5d:b6:17:41:4d:33:c9:89:24:ae:fc:26:f1:5e:
                    b5:77:f6:53:e0:eb:ea:38:5c:6d:da:31:c9:45:fe:
                    a8:46:a2:ba:0e:2d:22:f9:38:a0:10:6b:5e:ff:55:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D7:A4:74:76:8E:1A:2D:D5:8B:09:4A:B5:CD:50:34:1F:19:99:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65bb0bfb-03df-3e0d-81ca-25390f6635ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:28:19:a0:25:17:e8:96:f4:af:9b:fa:55:22:ba:8d:25:
         ef:be:0a:34:13:fd:68:1a:1a:d3:c0:6f:d7:fb:56:48:e2:2c:
         dc:5a:bd:cf:d2:3c:e5:ef:34:bf:3b:ed:47:12:ed:ae:5e:2a:
         a8:03:60:5b:b8:6a:14:34:87:54:53:73:c0:5a:ad:a5:0b:f3:
         5f:2e:ad:63:53:25:19:6f:c8:f8:e2:3d:75:c1:31:65:93:0c:
         8a:0a:12:87:a5:3f:0a:59:b5:b4:e8:ca:75:28:92:09:4f:57:
         e3:30:5e:60:a9:ec:c1:f3:76:41:8f:e8:66:29:79:70:d3:90:
         c3:98:c6:07:9e:46:ed:27:41:51:e8:37:1b:7a:90:d3:7e:92:
         34:2c:40:11:b6:9b:b6:5a:5a:8d:a8:a5:cd:a2:12:ad:7f:03:
         6f:39:1b:14:0b:ea:d5:ff:92:91:64:50:02:9f:28:7c:17:97:
         da:8f:0e:3a:6b:0c:e5:6f:f8:3b:2f:1e:11:3c:5f:eb:2d:90:
         55:57:5d:74:cb:9e:cf:16:0c:b4:12:1d:d8:17:94:69:54:26:
         4c:f5:a2:6d:b1:19:a3:6e:64:4c:cd:57:fe:6a:c3:d7:2d:0b:
         4f:69:51:ff:80:10:7d:dc:8d:09:b5:03:c8:d2:14:17:5e:8a:
         57:b9:c1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:30 2025 by rpki-client